This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator.
References
Configurations
History
21 Nov 2024, 05:22
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : 5.0
v3 : 5.3 |
References | () https://github.com/gulpjs/glob-parent/blob/6ce8d11f2f1ed8e80a9526b1dc8cf3aa71f43474/index.js%23L9 - Broken Link | |
References | () https://github.com/gulpjs/glob-parent/pull/36 - Patch, Third Party Advisory | |
References | () https://github.com/gulpjs/glob-parent/releases/tag/v5.1.2 - Release Notes, Third Party Advisory | |
References | () https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBES128-1059093 - Exploit, Third Party Advisory | |
References | () https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1059092 - Exploit, Third Party Advisory | |
References | () https://snyk.io/vuln/SNYK-JS-GLOBPARENT-1016905 - Exploit, Third Party Advisory | |
References | () https://www.oracle.com/security-alerts/cpujan2022.html - Patch, Third Party Advisory |
Information
Published : 2021-06-03 16:15
Updated : 2024-11-21 05:22
NVD link : CVE-2020-28469
Mitre link : CVE-2020-28469
CVE.ORG link : CVE-2020-28469
JSON object : View
Products Affected
oracle
- communications_cloud_native_core_policy
gulpjs
- glob-parent
CWE
CWE-400
Uncontrolled Resource Consumption